This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json) Hash identifier: RIe+B/+USuRRbX0VkzlZpoo6Td94PVxcyMmFKMcwR28= Subject key identifier: F8:90:87:8E:B9:DB:8C:8A:1D:B7:3A:1E:A9:6C:58:DA:AD:5B:B8:DC Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de Certificate serial: 019C416ACAF1200F93C843185E001082E949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft Manifest number: 0DEA Signing time: Mon 09 Feb 2026 08:00:43 +0000 Manifest this update: Mon 09 Feb 2026 08:00:43 +0000 Manifest next update: Tue 10 Feb 2026 08:00:43 +0000 Files and hashes: 1: CnCgZxqBwoZSj-sRCC6hjRMHYgE.roa (hash: t0U8GxVmfi3P7WDV+ltBtv7fLFx6DgcsLhiMKqOEWho=) 2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: VGmE5YXWNDUK1w2lSsyL76VRJjvFkQRYcTdWoldnI0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:ca:f1:20:0f:93:c8:43:18:5e:00:10:82:e9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de Validity Not Before: Feb 9 08:00:43 2026 GMT Not After : Feb 10 08:00:43 2026 GMT Subject: CN=f890878eb9db8c8a1db73a1ea96c58daad5bb8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:26:f7:eb:3c:cc:bb:4f:f1:9f:f2:e7:1b: 83:53:88:39:3a:95:b8:43:90:ab:10:63:68:fd:3f: 4b:9f:12:62:a0:18:e3:f2:17:b2:03:aa:4e:e3:f8: a7:f9:1e:97:e1:a3:f3:b2:00:53:55:66:91:2c:f9: 97:d7:aa:53:12:e8:d9:2d:5e:ff:5f:e7:66:0f:4a: 30:1c:e0:26:ea:34:3c:44:64:40:a0:41:84:6a:f2: f1:41:88:38:c8:5b:ba:29:30:9d:c3:f9:e4:25:eb: b3:70:d5:7a:4d:93:a9:59:c0:b8:9b:c0:86:ae:57: 35:64:8c:b9:0d:d4:6e:c3:7d:2a:6e:c6:a6:ca:37: 0e:8a:fe:47:0e:0d:a3:8c:86:e3:be:12:9f:19:37: 4f:d9:3f:bd:47:16:57:07:7c:43:c8:7d:07:a1:cb: c5:3d:39:fa:80:fb:eb:62:e4:7e:51:43:d7:5b:0e: 03:fe:e8:0b:08:e3:07:7a:57:ee:ba:b5:d1:cf:1e: 7c:7c:77:b5:9c:5a:8d:45:05:39:da:15:ab:1b:5f: 49:31:94:1f:81:f2:e2:b7:46:c0:e6:85:96:42:c9: 27:e0:0e:af:21:5a:19:56:17:16:90:75:68:24:75: a3:91:4d:3a:b8:43:a6:7c:75:7f:bd:0b:5d:ee:7d: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:90:87:8E:B9:DB:8C:8A:1D:B7:3A:1E:A9:6C:58:DA:AD:5B:B8:DC X509v3 Authority Key Identifier: keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cc:83:01:9e:98:0e:12:37:05:de:c9:79:3f:e7:b2:83:a3: ea:ed:ee:35:5a:0b:8f:8b:ad:ab:66:2f:58:1f:78:f4:f5:65: 6e:41:f6:8f:85:64:cd:b4:b7:f5:8f:ee:f8:65:bf:65:dc:7b: 1b:17:ec:89:a2:7e:2a:70:6d:87:56:65:94:e3:c8:a9:9d:f7: b1:86:fd:af:ff:69:f4:cb:a3:4e:3a:19:d7:22:0f:2f:7c:3f: 12:f0:1c:7e:d4:60:4e:28:e6:fb:45:db:2e:9f:8a:07:e0:1e: fd:90:2d:4f:a3:b0:27:53:6c:12:b4:27:9b:65:58:66:7f:e6: 25:fd:f6:42:ee:e7:bd:52:cd:c8:bc:a0:32:c8:14:20:44:b3: 2c:a0:f9:8d:7d:82:12:70:aa:10:38:ef:3b:0a:20:9d:36:4e: 6d:1b:2e:39:eb:ed:37:ce:60:82:ed:59:fc:a9:67:a6:be:00: 90:87:99:4e:2a:ca:dd:3d:0e:db:78:87:c8:5a:3d:5a:5d:8d: 79:02:bc:32:af:78:a8:5b:c4:12:56:4b:0c:01:cd:74:95:fd: 60:1a:02:0d:c5:bf:ac:1a:23:40:b6:b2:48:8d:60:67:9c:16: b8:95:9b:5f:1e:81:2c:56:e0:03:7c:88:5b:c9:9b:b7:3a:bf: d8:4d:70:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBasrxIA+TyEMYXgAQgulJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MzNiZDExMWZkOGNiNzZmNDg4M2JiYmNiZmRhNTlkYjY2 ZWQyZGUwHhcNMjYwMjA5MDgwMDQzWhcNMjYwMjEwMDgwMDQzWjAzMTEwLwYDVQQD EyhmODkwODc4ZWI5ZGI4YzhhMWRiNzNhMWVhOTZjNThkYWFkNWJiOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Am9+s8zLtP8Z/y5xuDU4g5OpW4 Q5CrEGNo/T9LnxJioBjj8heyA6pO4/in+R6X4aPzsgBTVWaRLPmX16pTEujZLV7/ X+dmD0owHOAm6jQ8RGRAoEGEavLxQYg4yFu6KTCdw/nkJeuzcNV6TZOpWcC4m8CG rlc1ZIy5DdRuw30qbsamyjcOiv5HDg2jjIbjvhKfGTdP2T+9RxZXB3xDyH0HocvF PTn6gPvrYuR+UUPXWw4D/ugLCOMHelfuurXRzx58fHe1nFqNRQU52hWrG19JMZQf gfLit0bA5oWWQskn4A6vIVoZVhcWkHVoJHWjkU06uEOmfHV/vQtd7n3FIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiQh46524yKHbc6HqlsWNqtW7jcMB8GA1UdIwQY MBaAFKczvREf2Mt29Ig7u8v9pZ22btLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWIt MDhjZWQ5MmM5NzcwLzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWItMDhjZWQ5MmM5Nzcw LzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8yDAZ6Y DhI3Bd7JeT/nsoOj6u3uNVoLj4utq2YvWB949PVlbkH2j4VkzbS39Y/u+GW/Zdx7 GxfsiaJ+KnBth1ZllOPIqZ33sYb9r/9p9MujTjoZ1yIPL3w/EvAcftRgTijm+0Xb Lp+KB+Ae/ZAtT6OwJ1NsErQnm2VYZn/mJf32Qu7nvVLNyLygMsgUIESzLKD5jX2C EnCqEDjvOwognTZObRsuOevtN85ggu1Z/Klnpr4AkIeZTirK3T0O23iHyFo9Wl2N eQK8Mq94qFvEElZLDAHNdJX9YBoCDcW/rBojQLaySI1gZ5wWuJWbXx6BLFbgA3yI W8mbtzq/2E1w0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:05 2026 by rpki-client